Senior AI-Driven Product Security Engineer

Webhosting; Austin (TX); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity plan

Job summary

Cloudflare is seeking a Senior Product Security Engineer to lead security assessments and vulnerability operations for core software products. You will analyze system architecture, model threats, and triage findings to engineers with SLAs in mind.

You will write code, integrate AI/LLMs for initial triage, and build tools to handle security findings at scale, sitting at the intersection of Product Security, Vulnerability Operations, and AI tooling.

Qualifications

• Extensive Product/AppSec experience in large-scale cloud environments or SaaS.
• Hands-on AI/LLMs for automation and operational solutions.
• Threat modeling methodologies (e.g., STRIDE) with business context.
• Lifecycle ownership of vulnerabilities across multi-stakeholder teams.
• Strong cross-functional leadership and communication.
• Familiarity with offensive security tooling and testing methods.
• Experience scaling crowdsourced security programs (HackerOne/Bugcrowd) or agile workflows in JIRA.
• Experience integrating hardware security features into production code.

Responsibilities

• Autonomously drive AI security innovations and build automation to scale workflows.
• Lead security architecture reviews and threat modeling across distributed systems.
• Own vulnerability triage, routing, and remediation within SLAs.
• Oversee bug bounty triage and validation based on exploitability and risk.
• Shape internal pentest scope and liaise with developers for remediation.
• Mentor engineers and foster security champions across teams.

Skills

Senior Product/AppSec

AI & Automation

Threat Modeling

Vulnerability Lifecycle

Influence & Communication

Offensive Security

Program Management

Hardware Security Integration

Tools

HackerOne

Bugcrowd

JIRA

Job description

Cloudflare is seeking a Senior Product Security Engineer to lead security assessments and vulnerability operations for core software products. You will analyze system architecture, model threats, and triage findings to engineers with SLAs in mind.

You will write code, integrate AI/LLMs for initial triage, and build tools to handle security findings at scale, sitting at the intersection of Product Security, Vulnerability Operations, and AI tooling.